HIGH8.6Packagist
GHSA-229x-22xc-2f2wZendframework Local file disclosure via XXE injection in Zend_XmlRpc
Modified: 6/7/2024
package
Packagist/zendframework/zendframework1
pkg:packagist/zendframework/zendframework1
CRITICAL9.8Packagist
GHSA-2hvh-c5c2-vj85· CVE-2015-7695Zend Framework SQL injection vector using null byte for PDO
Modified: 4/23/2024
HIGH7.5Packagist
GHSA-2jx7-xg83-j2m7Zendframework Denial of Service vector via XEE injection
Modified: 6/7/2024
CRITICAL9.8Packagist
GHSA-2x36-qhx3-7m5fZendFramework1 Potential SQL injection in the ORDER implementation of Zend_Db_Select
Modified: 12/4/2024
MEDIUMPackagist
GHSA-43xg-87xw-jpv8· CVE-2014-2681Several Zend Products Vulnerable to XXE and XEE attacks
Modified: 12/7/2024
HIGH7.5Packagist
GHSA-4j9x-g4x8-vcmfZendFramework potential XML eXternal Entity injection vectors
Modified: 12/4/2024
MEDIUM6.1Packagist
GHSA-4v57-pwvf-x35jZendframework potential Cross-site Scripting vector in `Zend_Service_ReCaptcha_MailHide`
Modified: 6/7/2024
MEDIUM6.1Packagist
GHSA-4vf6-mq7w-3hp6Zend_Filter_StripTags vulnerable to Cross-site Scripting when comments allowed
Modified: 6/7/2024
MEDIUM6.1Packagist
GHSA-5957-5crx-79jx· CVE-2015-3154Zenario CMS vulnerable to CRLF injection
Modified: 2/16/2024
MEDIUMPackagist
GHSA-5wm2-38q5-5rxv· CVE-2014-2683Several Zend Products Vulnerable to XXE and XEE attacks
Modified: 12/7/2024
CRITICAL9.8Packagist
GHSA-6fqw-j3vm-7f66Zendframework1 Potential SQL injection in ORDER and GROUP functions
Modified: 12/4/2024
HIGH7.3Packagist
GHSA-7pg4-5233-82jv· CVE-2012-3363Zend Framework XXE Vulnerability
Modified: 4/9/2024
HIGH7.5Packagist
GHSA-848f-mph5-9pm9Zendframework Potential Information Disclosure and Insufficient Entropy vulnerability
Modified: 12/4/2024
HIGH7.5Packagist
GHSA-8xhv-gqm4-3w99ZendFramework1 Potential Insufficient Entropy Vulnerability
Modified: 12/4/2024
MEDIUMPackagist
GHSA-9m5v-vq4f-mrvf· CVE-2012-5657Zend Framework XXE Vulnerability
Modified: 12/4/2024
HIGH7.5Packagist
GHSA-9v78-h226-2rmqZendframework potential security issue in login mechanism
Modified: 12/4/2024
MEDIUMPackagist
GHSA-f6rc-rh43-h8gr· CVE-2014-8088Zend Access Restriction Bypass
Modified: 12/5/2024
MEDIUM6.1Packagist
GHSA-g52p-86j5-xr8qZendFramework Potential Cross-site Scripting in Development Environment Error View Script
Modified: 6/7/2024
MEDIUMPackagist
GHSA-gp39-h9c2-qw79· CVE-2014-2682Several Zend Products Vulnerable to XXE and XEE attacks
Modified: 12/7/2024
MEDIUM6.1Packagist
GHSA-gwpm-pm6x-h7rjZendFramework Cross-site Scripting vector in `Zend_Filter_StripTags`
Modified: 6/7/2024
MEDIUMPackagist
GHSA-h5p3-7mg6-hgj4· CVE-2012-6531Zend Framework XEE Vulnerability
Modified: 1/12/2024
MEDIUM6.1Packagist
GHSA-hg35-vqp3-fv39ZendFramework potential Cross-site Scripting vectors due to inconsistent encodings
Modified: 6/7/2024
HIGH7.5Packagist
GHSA-hx3m-959f-v849ZendFramework local file inclusion vector in `Zend_View::setScriptPath()` and `render()`
Modified: 6/7/2024
MEDIUM6.1Packagist
GHSA-j543-vg33-g6vjZendFramework potential Cross-site Scripting vector in `Zend_Dojo_View_Helper_Editor`
Modified: 6/7/2024
MEDIUMPackagist
GHSA-jh4x-4wmf-67pr· CVE-2012-6532Zend Framework XEE Vulnerability
Modified: 1/12/2024
CRITICAL9.8Packagist
GHSA-mhpx-3rv8-wrjmZendFramework potential XML eXternal Entity injection vectors
Modified: 12/4/2024
CRITICAL9.8Packagist
GHSA-p9hp-3gpv-52w3· CVE-2016-6233Zend Framework Allows SQL Injection
Modified: 2/17/2024
HIGH7.8Packagist
GHSA-pw5c-xqf2-6xc2· CVE-2015-5723Doctrine Security Misconfiguration Vulnerability
Modified: 11/30/2024
CRITICAL9.8Packagist
GHSA-qf36-fx9f-232xZendFramework potential SQL Injection Vector When Using PDO_MySql
Modified: 6/7/2024
CRITICAL9.8Packagist
GHSA-qh9w-r7g5-q939· CVE-2014-8089Zend Framework SQL injection vulnerability
Modified: 4/23/2024
CRITICAL9.8Packagist
GHSA-v42g-7q2x-cw32Zendframework1 potential SQL injection vector using null byte for PDO (MsSql, SQLite)
Modified: 12/4/2024
MEDIUM6.1Packagist
GHSA-vvm3-rv48-j3g5Zendframework Potential XSS or HTML Injection vector in Zend_Json
Modified: 6/7/2024
MEDIUMPackagist
GHSA-w5mj-j45q-m638ZendFramework1 Potential Security Issues in Bundled Dojo Library
Modified: 6/7/2024
MEDIUMPackagist
GHSA-xp8p-9rq5-4wgv· CVE-2015-5161ZendXml and Zend Framework contain XXE and XEE Vulnerabilities
Modified: 12/4/2024